Ip Access-List Extended Command - ADTRAN 5000 Series Command Reference Manual

Command Reference Guide
ip access-list extended <listname>
Use the ip access-list extended command to create an empty access list and enter the extended access-list.
Use the no form of this command to delete an access list and all the entries contained in it.
The following lists the complete syntax for the ip access-list extended commands:
<action> <protocol> <source ip> <source port> <destination ip> <destination port>
Example:
[permit | deny] [ip | tcp | udp] [any | host <A.B.C.D> | <A.B.C.D> <W.W.W.W>]
<source port>* [any | host <A.B.C.D> | <A.B.C.D> <W.W.W.W>] <destination port>*
Example:
[permit | deny] icmp [any | host <A.B.C.D> | <A.B.C.D> <W.W.W.W>]
[any | host <A.B.C.D> | <A.B.C.D> <W.W.W.W>] <icmp-type>* <icmp-code>* <icmp-message>*
Destination IP Address
* = optional
Syntax Description
<listname>
<protocol>
<source ip>
<source port>
61200990L1-35E
Source IP Address
Destination IP Address
Source IP Address
Identifying the configured access list using an alphanumeric descriptor. All access
list descriptors are case-sensitive.
Specifies the data protocol such as IP, ICMP, TCP, UDP, or a specific protocol
(range: 0 to 255).
Specifies the source IP address used for packet matching. IP addresses can be
expressed in one of three ways:
1. Using the keyword any to match any IP address. For example, entering deny
any will effectively shut down the interface that uses the access list because all
traffic will match the any keyword.
2. Using the host <A.B.C.D> to specify a single host address. For example,
entering permit host 196.173.22.253 will allow all traffic from the host with an
IP address of 196.173.22.253.
3. Using the <A.B.C.D> <wildcard> format to match all IP addresses in a "range."
Wildcard masks work in reverse logic from subnet mask. Specifying a one in
the wildcard mask equates to a "don't care". For example, entering permit
192.168.0.0 0.0.0.255 will permit all traffic from the 192.168.0.0/24 network.
Optional. The source port is used only when <protocol> is tcp or udp.
Copyright © 2005 ADTRAN
Global Configuration Mode Command Set
344